You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/hdinsight/use-managed-identity-for-sql-database-authentication-in-azure-hdinsight.md
+14-18Lines changed: 14 additions & 18 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -6,17 +6,16 @@ ms.topic: how-to
6
6
author: abhishjain002
7
7
ms.author: abhishjain
8
8
ms.reviewer: nijelsf
9
-
ms.date: 03/31/2025
9
+
ms.date: 10/06/2025
10
10
---
11
11
12
-
# Use Managed Identity for SQL Database authentication in Azure HDInsight
12
+
# Use managed identity for SQL database authentication in Azure HDInsight
13
13
14
+
HDInsight added the Managed Identity (MI) option for authenticating SQL databases within its cluster offerings and providing a more secure authentication mechanism.
14
15
15
-
HDInsight added the Managed Identity option for authenticating SQL databases within its cluster offerings and providing a more secure authentication mechanism.
16
+
This article outlines the process of using the Managed Identity option for SQL database authentication when creating an HDInsight cluster.
16
17
17
-
This article outlines the process of using the Managed Identity (MSI) option for SQL Database authentication when creating an HDInsight cluster.
18
-
19
-
The Managed Identity (MI) option is available for the following Databases:
18
+
The managed identity option is available for the following databases:
20
19
21
20
| Databases | Host on Behalf of (HoBo) DB | Bring Your Own (BYO) DB |
22
21
|-|-|-|
@@ -25,35 +24,32 @@ The Managed Identity (MI) option is available for the following Databases:
25
24
|Oozie |✅ |✅ |
26
25
|Ranger (ESP)|❌ | ❌ |
27
26
28
-
> [!NOTE]
29
-
> * Managed Identity (MI) is currently available only in public regions. It will be rolled out to other regions (Federal and China regions) in future releases.
30
-
> * MI option isn't enabled by default. To get it enabled, submit a [support ticket](https://portal.azure.com/#blade/Microsoft_Azure_Support/HelpAndSupportBlade/overview) with your subscription and region details.
31
27
32
28
> [!IMPORTANT]
33
-
> * It's recommended not to update the Managed Identity after cluster recreation as it can disrupt cluster operation.
34
-
> * When you recreate an MSI with the same name, you must recreate the contained user and reassign roles, as the new MSI will have different object and client IDs even if the name remains unchanged.
29
+
> * It's recommended not to update the managed identity after cluster recreation as it can disrupt cluster operation.
30
+
> * When you recreate a managed identity with the same name, you must recreate the contained user and reassign roles, as the new managed identity have different object ID and client ID even if the name remains unchanged.
35
31
36
-
## Steps to Use Managed Identity during cluster creation in Azure portal
32
+
## Steps to use managed identity during cluster creation in Azure portal
37
33
38
-
1. During cluster creation, navigate to the Storage section and select the SQL database for Ambari/Hive/Oozie. Choose Managed Identity as the Authentication method.
34
+
1. During cluster creation, navigate to the Storage section and select the SQL database for Ambari/Hive/Oozie. Choose managed identity as the authentication method.
39
35
40
36
:::image type="content" source="./media/use-managed-identity-for-sql-database-authentication-in-azure-hdinsight/basic-tab.png" alt-text="Screenshot showing the basic tab." border="true" lightbox="./media/use-managed-identity-for-sql-database-authentication-in-azure-hdinsight/basic-tab.png":::
41
37
42
-
1. Select the Managed Identity to authenticate with SQL Database.
38
+
1. Select the managed identity to authenticate with the SQL database.
43
39
44
40
:::image type="content" source="./media/use-managed-identity-for-sql-database-authentication-in-azure-hdinsight/storage-tab.png" alt-text="Screenshot showing the storage tab." border="true" lightbox="./media/use-managed-identity-for-sql-database-authentication-in-azure-hdinsight/storage-tab.png":::
45
41
46
-
1. Create a contained user with the Managed identity in the corresponding SQL database.
42
+
1. Create a contained user with the managed identity in the corresponding SQL database.
47
43
48
44
Follow these steps in the Azure SQL database query editor to create a database user and grant it read-write permissions. Perform these steps for each SQL Database you're going to use for different services such as Ambari, Hive, or Oozie.
49
45
50
46
51
47
> [!NOTE]
52
-
> User name must contain the original MSI name extended by a user-defined suffix. As best practice, the suffix can include an initial part of its Object ID.
48
+
> User name must contain the original managed identity name extended by a user-defined suffix. As best practice, the suffix can include an initial part of its Object ID.
53
49
Object ID of managed identity can be obtained from portal on the managed identity portal page.
0 commit comments